Question DOCU-08

Do you have a documented, and currently implemented, employee onboarding and offboarding policy?

Standard Guidance

EDUCAUSE provides no guidance here

Answering "NO"

Briefly summarize your response.

Answering "YES"

Provide a reference to your employee onboarding and offboarding policy and supporting documentation or submit it along with this fully populated HECVAT.

Reason for Question

Managing and protecting a vendor's assets through appropriate human resource management is of upmost importance. Knowing how roles and access controls are implemented (directed by policy) within a vendor's infrastructure during the onboarding and offboarding processes is indicative of how access control is regarded in other areas on the provider (vendor).

Follow-Up Inquiries

Unsatisfactory answers should be met with questions about access control authority, roles and responsibilities (of access grantors), administrative privileges within the vendor's infrastructure(s), etc.

HECVAT Pro Advice

[Add expert insights and best practices]

Implementation Tips

[Add practical steps for SME SaaS vendors]

FAQ

[Add common questions related to this HECVAT item]

Resources

[Add links to relevant articles or tools]